Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          /pHThDDZewr+I3chVK9/0Sx+rX+zuhrthA9XyXijcu4=
Subject key identifier:   C6:28:63:4C:1C:1A:06:2B:90:70:DC:05:CC:B3:40:51:B8:4A:46:E6
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       019D3752E91BD1AE78A87E26515EE56E3843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          137C
Signing time:             Sun 29 Mar 2026 02:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:13 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: 6u9rCUSYUfeoTtNc3iRdOA8fX+hRtKSXpXdLDxZYfHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:e9:1b:d1:ae:78:a8:7e:26:51:5e:e5:6e:38:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Mar 29 02:01:13 2026 GMT
            Not After : Mar 30 02:01:13 2026 GMT
        Subject: CN=c628634c1c1a062b9070dc05ccb34051b84a46e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:3c:07:47:55:70:cc:dc:da:d0:e4:5e:4b:
                    cf:ea:ca:ed:79:0d:c3:59:f5:ac:53:d4:4d:40:ee:
                    7d:e1:c1:a0:bf:de:64:aa:c3:95:8e:b5:ab:81:a9:
                    16:44:d2:c1:79:9f:96:92:8f:ce:e6:b8:c1:fc:6b:
                    cb:98:0f:be:e4:7f:8e:bf:b5:6b:06:b7:45:fe:85:
                    e0:30:8d:63:a3:18:2b:cf:0a:5e:d7:3a:56:aa:14:
                    e6:ed:b0:cd:c9:62:69:e8:c9:dd:28:07:31:cb:be:
                    a2:c3:41:f9:e8:5d:47:5c:25:71:65:5e:fc:98:5b:
                    0e:a7:16:74:7b:15:6e:40:64:ba:c8:ef:20:6c:27:
                    7f:f8:20:c4:b8:95:b3:d8:18:e5:8d:90:b0:78:eb:
                    25:d5:91:b0:ac:73:18:4f:18:e0:42:98:b6:0a:1a:
                    22:28:56:15:6c:9d:cc:ee:b4:22:08:8b:ca:d1:3a:
                    7d:7c:ca:e8:cf:e5:ea:ac:ef:33:55:ee:66:0d:fd:
                    ae:b6:6a:4d:18:ce:81:61:84:15:65:46:1b:2a:43:
                    a1:09:df:d9:7d:51:74:db:96:7a:68:65:5d:98:cd:
                    32:ac:db:da:c5:eb:44:41:7f:bc:81:3c:da:9f:80:
                    4a:51:5f:69:1b:d9:b5:f7:f3:b6:dd:56:58:94:b4:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:63:4C:1C:1A:06:2B:90:70:DC:05:CC:B3:40:51:B8:4A:46:E6
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:ab:9e:9d:5d:f3:35:d2:68:ef:fb:e6:95:fe:d2:37:a4:
         bc:a9:fa:b7:73:4a:87:30:04:1e:cc:a0:75:b7:ef:82:42:8b:
         16:7f:1a:53:46:96:94:b7:ca:9c:9f:95:af:8b:75:fa:c9:c0:
         f2:fd:63:4d:9e:74:14:c9:fc:7f:1e:58:4d:bf:2e:dc:ff:3f:
         d4:7c:3a:3a:91:fc:34:38:ba:c6:e3:a2:f0:d3:cb:45:4f:ac:
         d0:0d:f5:cf:27:71:09:85:f6:09:d7:72:2e:49:3c:7b:97:a5:
         5d:34:df:37:c1:0c:0f:ad:97:d3:52:c1:c8:3b:35:a9:0f:8f:
         88:77:9c:a3:29:14:c9:5b:bd:d3:f0:02:15:aa:43:ef:4b:2a:
         fa:62:15:27:db:b5:15:a2:62:2c:34:45:85:1a:6a:08:ca:85:
         59:3e:ca:cc:d6:8a:75:24:1c:91:54:1e:79:59:0a:b7:e8:c7:
         c3:c5:55:8b:bf:ac:e9:cd:d1:ad:6c:9a:98:52:4b:ca:44:06:
         71:c9:34:05:e6:33:71:d5:1c:d5:40:1c:e3:79:a5:16:c4:c9:
         91:7c:87:3a:e1:29:29:b0:d7:c9:9e:a4:5d:b5:5a:c6:32:b6:
         be:c0:71:92:54:bf:d7:ac:22:dc:3f:98:64:af:0a:56:23:5d:
         6a:45:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client